The Web Application Threat Landscape Is Getting Worse

ESG just published a new research report titled, Web Application Testing Tools and Services. The report is comprised of data collected in a survey of 200 North American-based security professionals working at enterprise organizations (i.e., more than 1,000 employees).

In one of the questions, security professionals were asked a simple question: How would they compare the web application threat landscape today to two years ago? It turns out that things are going downhill; 21% of respondents say that the web application threat landscape is significantly worse than it was 24 months ago, while another 36% believe that the web application threat landscape is somewhat worse than it was 24 months ago.